Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
File: caJzmyDCWcXRs4jRRT9vF5nyj2w.mft (raw, json)
Hash identifier: lupm7reaWIkYfA+TP49i/NjLbdTZEn2Dv4GX5zZ8ZaA=
Subject key identifier: E8:BC:D6:F3:0B:18:B3:AF:B9:8D:81:C1:74:BF:8D:7B:57:E0:12:84
Authority key identifier: 71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
Certificate issuer: /CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Certificate serial: 01961020B005EA27EC6DA6A9A3ED9487D20D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
Manifest number: 0232
Signing time: Mon 07 Apr 2025 12:01:39 +0000
Manifest this update: Mon 07 Apr 2025 12:01:39 +0000
Manifest next update: Tue 08 Apr 2025 12:01:39 +0000
Files and hashes: 1: 5TxBRMul-Sk6vrxAy-O3Gig1UHg.roa (hash: eQW3KPMxFJcTn3nfO5KDUYdR77aYysAZcOPu9j2QK1w=)
2: NnS9tE0Wd3GJX8d4rDN6hefth0k.roa (hash: iMULd1rU9nLxXdG6/iod6VTsBhibbUWJ3DwkFA8v85s=)
3: R5EoUABcKiwLg06w_OxlkJfMqUk.roa (hash: irt2J6S0P6bVoeLD1I6fHpK1oay2SiSe0bMOlV1dUxk=)
4: caJzmyDCWcXRs4jRRT9vF5nyj2w.crl (hash: dgIOKSFCAyJXeZeWfe3J0br1uAgdktPGoEDjeeQEoag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 12:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:20:b0:05:ea:27:ec:6d:a6:a9:a3:ed:94:87:d2:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Validity
Not Before: Apr 7 12:01:39 2025 GMT
Not After : Apr 8 12:01:39 2025 GMT
Subject: CN=e8bcd6f30b18b3afb98d81c174bf8d7b57e01284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:55:9f:dd:1e:a3:28:3c:eb:3a:89:6d:99:83:
bb:1a:49:7f:92:ec:a4:a7:52:af:2f:a8:ed:af:f7:
39:87:57:b7:e2:db:24:4a:ac:8c:03:18:16:98:a1:
87:f5:fb:85:6a:85:83:e0:b8:12:d2:f1:67:70:aa:
e0:b2:19:42:2b:4f:cf:30:f3:cd:1a:21:58:c6:7e:
f9:f9:d9:66:5c:25:67:31:06:8e:5d:ed:7f:f3:80:
90:b2:42:ff:5c:d2:3d:ba:bf:00:86:d2:da:21:f4:
7f:2f:be:d6:c4:15:94:74:d0:5e:07:ef:f0:30:65:
56:11:96:3f:01:81:8c:54:23:eb:d1:f0:da:48:0c:
17:27:7f:1d:e2:d6:f4:3a:54:3f:c2:f7:6f:0d:d1:
97:54:2e:d4:9d:d8:ca:de:73:37:62:27:dd:54:78:
53:f1:3e:0b:3e:93:27:ac:34:ad:8c:8b:4b:dc:e8:
c5:8c:44:64:99:1a:c3:1a:f7:d7:9c:8f:b9:c3:9f:
27:6f:dc:86:5c:38:53:cb:51:3b:61:70:77:42:0e:
6f:63:d9:51:7c:86:9c:7e:dc:2d:e2:6c:17:bc:d3:
81:af:8d:29:10:ab:8e:c2:2d:ec:7d:b6:1e:80:fd:
04:dc:59:a4:28:e7:fd:a2:85:df:a8:4a:3a:4a:f9:
98:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BC:D6:F3:0B:18:B3:AF:B9:8D:81:C1:74:BF:8D:7B:57:E0:12:84
X509v3 Authority Key Identifier:
keyid:71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:65:51:74:68:30:cc:5a:81:f9:fc:5d:57:1a:fc:59:a1:4f:
05:14:d7:5b:df:6b:2c:05:76:17:e7:f3:87:58:d4:42:19:e5:
55:84:bd:c0:29:53:e7:70:22:fe:93:c3:19:8a:8d:68:11:ee:
fa:69:bc:ad:1b:ef:87:f3:c6:12:9b:a8:2e:18:31:00:66:d6:
a1:91:54:a2:5a:79:87:dc:38:5e:35:9a:ae:c5:2c:d4:2f:a7:
09:c1:26:70:af:c0:4a:ec:89:67:d5:73:8b:13:e1:3c:6a:ff:
5f:d5:dd:62:5f:4f:31:4f:6e:00:5c:cf:0d:c3:b1:3b:03:a4:
55:5f:e7:5a:8e:fd:3c:2d:47:ba:20:f8:b4:10:bb:f6:f0:12:
b1:1e:85:5d:80:af:27:04:c1:4c:9b:25:84:63:54:fe:50:d4:
00:72:e2:78:52:b0:1b:4f:82:8d:a9:a9:42:f8:28:16:b8:7d:
ce:48:c9:bc:92:8a:bb:9f:fc:4f:5c:ae:59:b1:c7:b9:ad:d5:
26:f2:67:a3:f9:f5:69:52:22:78:ce:ce:54:d9:3c:7e:35:6d:
13:a9:41:1d:a7:f9:53:b3:c3:6f:af:f0:dd:89:d5:1e:7e:11:
5a:2f:63:2c:14:65:6b:22:95:47:54:79:69:59:a2:8a:06:a4:
90:8d:a2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:37:11 2025 by rpki-client